EUVD-2025-115241

Malicious code in colors-vortex-phoebe-husky npm...

EUVD-2025-116483

Malicious code in astro-vortex-commitlint-prompts npm...

EUVD-2025-116473

Malicious code in async-native-vortex-lynx npm...

EUVD-2025-116412

Malicious code in auriga-stop-superagent-vortex npm...

EUVD-2025-116081

Malicious code in blaze-eris-fornax-vortex npm...

EUVD-2025-115932

Malicious code in buffer-soap-vortex-mini-css-extract-plugin npm...

EUVD-2025-116836

Malicious code in airbnb-vortex-lint-hugo npm...

MAL-2025-142552 Malicious code in fomalhaut-rest-xenos-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59d8633530988e6f0c2f5b25ba330adf84ea689d15e0e288004ed1d9bad46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147461 Malicious code in rimraf-vortex-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38ac0ee46954d7b993079acbf423ca421753c5b7c1f34ee247e3328be09c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149193 Malicious code in vortex-vulcan-commitlint-config-angular-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488fcc3bef6ab42a047caf3a6e9d707eefc126e0dd734eaaaaa3ea53b5b917f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149187 Malicious code in vortex-phenomic-schema-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144176 Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0ccf783d99e2f174768c7a2d194db3957b6b4005ac8c4e3b73a310d979249d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149184 Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143107 Malicious code in grus-vortex-astro-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61e3280e1988ae1427e0687e09494aef1d2eb0292075f75ddbd7458039d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141480 Malicious code in dagda-ora-vortex-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148460 Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145719 Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396e04392f9a76bac22dee614f1bfcbcd3cbf55bd09109b9d581980e115ba151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149190 Malicious code in vortex-request-websockets-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142495 Malicious code in firebase-eleventy-protractor-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...